Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HIo3u4DqtfKW6N0XprYrg10ZrSs.roa
File: HIo3u4DqtfKW6N0XprYrg10ZrSs.roa (raw, json)
Hash identifier: qQXtgyiLfadbDYFgTHk3Gl5Fre9rrVQ7J0EktlFWr0k=
Subject key identifier: 1C:8A:37:BB:80:EA:B5:F2:96:E8:DD:17:A6:B6:2B:83:5D:19:AD:2B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DC99FA7CE075EEBBDF39623E58A327146
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HIo3u4DqtfKW6N0XprYrg10ZrSs.roa
Signing time: Wed 21 Feb 2024 03:05:00 +0000
ROA not before: Wed 21 Feb 2024 03:05:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:c99f:21df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c9:9f:a7:ce:07:5e:eb:bd:f3:96:23:e5:8a:32:71:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 21 03:05:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c8a37bb80eab5f296e8dd17a6b62b835d19ad2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:bd:7d:8f:60:48:85:e2:b5:b1:79:1c:36:
9b:e5:32:31:40:04:9c:a2:a8:4e:ec:13:0d:50:b6:
9e:5d:e2:ce:a4:50:d5:c8:a3:8f:af:26:cf:80:6f:
f9:95:8f:9a:d4:6a:d1:92:4c:1e:25:a8:b9:cb:b4:
59:47:4a:20:c0:0a:1d:6d:73:b2:f4:c6:a8:49:32:
e7:27:de:35:a5:12:34:d2:72:fc:cd:d8:7b:2f:1e:
63:2b:42:70:c1:3f:70:59:30:a4:3f:1e:7d:e6:e8:
03:59:ca:86:35:8a:dd:38:2f:d8:a7:2d:d7:3b:f9:
ab:24:07:22:69:f7:8d:83:be:53:88:64:43:ed:1e:
30:7b:ce:71:e6:55:9a:d0:41:5f:b8:f7:95:83:99:
94:b0:ea:86:c9:95:32:1d:47:50:1f:5a:79:e5:c0:
2b:fb:41:bf:22:e4:c0:2c:39:68:62:52:fe:c4:08:
2c:5d:b9:14:ff:85:15:3b:71:4f:7c:24:10:85:6d:
c8:7b:48:af:ae:f2:b9:8c:2e:71:8b:01:74:60:ce:
e5:72:57:e5:1c:bb:92:09:6d:b0:dd:5d:a7:9b:05:
a7:37:05:12:4d:d9:af:bd:65:74:11:b0:7c:c2:8e:
a8:13:53:d2:ae:b6:50:5e:ff:d2:41:f8:9f:87:6a:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8A:37:BB:80:EA:B5:F2:96:E8:DD:17:A6:B6:2B:83:5D:19:AD:2B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HIo3u4DqtfKW6N0XprYrg10ZrSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:24:40:61:7c:05:6e:3b:17:3b:2e:33:ca:fd:43:86:d4:be:
5d:3e:6c:f6:c7:c3:e0:0a:7a:36:a9:95:46:e4:81:44:57:3c:
25:13:82:b2:6a:f9:8c:e9:d8:72:39:fe:5c:7d:be:b5:f5:a0:
93:8e:a8:38:f7:31:c8:8a:b0:b0:82:26:b7:60:cc:79:df:87:
17:d2:59:c3:68:49:35:21:42:3a:74:eb:01:3d:58:4d:f5:db:
a2:2e:9a:40:98:2c:ec:40:e4:e3:b7:06:66:a9:e7:73:a0:f6:
78:4c:e6:62:b8:32:1b:01:8d:5d:1e:be:d0:91:fd:27:49:5c:
85:94:c4:21:0c:da:b7:cd:2b:50:a1:bf:25:d2:e4:cd:24:14:
74:b1:0a:35:c8:5d:78:c8:93:76:4f:62:ba:29:ca:57:d4:05:
3d:cb:4c:5e:85:fe:8d:a5:00:43:72:72:f6:aa:10:19:e9:af:
1f:58:34:fa:d2:25:a6:6b:4f:da:85:ab:7e:42:8f:f6:92:ee:
60:9d:84:28:a7:51:06:67:68:8d:88:7d:d5:54:38:10:70:42:
af:8b:ca:09:e9:bb:a4:ed:1c:c1:be:70:b0:12:bb:b5:ab:ce:
84:1d:be:52:82:15:8d:a8:e9:58:6c:28:62:52:dd:8c:b2:ae:
e4:ff:ef:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:03 2025 by rpki-client